MAL-2025-104744 Malicious code in jwuvzy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5012e25f3404a133074126802338680faabe84f3c765f2df9d1d08b537ddc7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109701 Malicious code in timnwd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6656a0cad632a3576ab4c56a14671f38e9243d157b6cdeb875de93a01b7f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b24602d97058514144f5e583fd3d127cc8c1f5308b2d8b36f9295b905867804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d71a6227d813543877f86e6253c8316a6c89a1c78f019e4aa82d3d6bb60dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105941 Malicious code in molecular_armadillo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4838da5ba768ebb4a315ff2487e9945d4e167d6ee7dc902881b97b74763e721b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106801 Malicious code in orildyn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6990b6902fbfdcea9fa065f255fe5d265f25042d61bc17cc0079641527746f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107990 Malicious code in retired_badger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad172ab6ca54691e135736b857d66dbce91cf04308562fb482e718489a7c8d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105107 Malicious code in liable_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c00acd570e6ebbbbd1a9e0baf6c3ca0df37959b4a42a4b76512d3aac6e35a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109160 Malicious code in stormy_wombat-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236808146fd31fd47197a61fa557dc4a772ccb7081673da28a4f7df334a11299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104237 Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103294 Malicious code in golden_armadillo-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eae3eb2332af1e6b398bad9dbfa821216ddd3b8b0b80e54a92766d157b6e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105790 Malicious code in melted_turkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341df1349e97f3b43b74ce5833004f0aeea43aa21152ea5df512022f642001d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111555 Malicious code in zippy_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260609d27cbbe4661b1266f150c7e13df9beeb9972c6e09fc1b5ba15b4ff4928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106856 Malicious code in ouyrjh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6c5d5ff7fb8c384df3dc217b566e50885f006c4c363ad8296d207839896cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102879 Malicious code in fortunate_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1b17f0089f09b2b0e23dd44e5c2103c52dbddc2d346186e9e3dc3da7194e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda94cc8717a6a5b9007520e0328f2d2ca52603afc16b1a0c587ad91fceb2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99343 Malicious code in alert_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3b61dcbef9a67749e2788464d73e9120c2b2a0475c3c2192a2d878eacdce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_bonobo_crimson-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3050041090b08dfd57bf5f9556f4c6c36b3478bb5792747d7c5b7b8197436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_lynx_olive-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71e9152fb58b1334ba6c7a2121278977d601333655d5fda36cdc190914f1204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...